mysql CVE-2023-22084、CVE-2023-22015、CVE-2023-22026 、CVE-2023-22028
CVE-2023-22084
InnoDB相关：
InnoDB: Fixed processing of single character tokens by a FTS parser plugin.
Our thanks to Shaohua Wang for the contribution. (Bug #35432973)
InnoDB: The last detected deadlock section of the engine status log was only showing 1024 characters for the combined thread and query information. Fixing by removing the printed query string limit. (Bug #80927, Bug #23036096)
mysql 5.7.43和5.7.44的对比：https://github.com/mysql/mysql-server/compare/mysql-5.7.43...mysql-5.7.44
疑似fix：https://github.com/mysql/mysql-server/commit/6f56e238848a104f18a0d67322572e51e41c64a8
CVE-2023-22015
CVE-2023-22015 是一个影响 Oracle MySQL 的漏洞，属于 MySQL Server 组件中的一个安全问题。这个漏洞可能被攻击者利用，导致 拒绝服务（DoS） 或 服务中断。具体来说，攻击者可以通过向 MySQL 发送特制的请求来触发服务器崩溃。
https://github.com/mysql/mysql-server/compare/mysql-5.7.42...mysql-5.7.43
疑似fix：https://github.com/mysql/mysql-server/commit/ee22af87ea52ffb79c1db0372f58b89d79815281
CVE-2023-22026
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-43.html
跟optimizer相关的：
During optimization, range-select tree creation uses logic which differs based on the left-hand side of the IN() predicate. For a field item, each value on the right-hand side is added to an OR tree to create the necessary expression. In the case of a row item comparison (example: WHERE (a,b) IN ((n1,m1), (n2, m2), ...)), an expression in disjunctive normal form (DNF) is needed. A DNF expression is created by adding an AND tree with column values to an OR tree for each set of RHS values, but instead the OR tree was added to the AND tree causing the tree merge to require exponential time due to O(n2) runtime complexity. (Bug #108963, Bug #34758905)
CVE-2023-22028
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-44.html
Some complex queries using multiple common table expressions were not always handled correctly. (Bug #34900334)
References: This issue is a regression of: Bug #34377854.